From 3c3d98970047b98307064d5d52c25bd160b4df42 Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 31 Jul 2026 12:31:11 +0000 Subject: [PATCH] fix(deps): bump spring-boot to 4.0.7 to resolve spring-webmvc/spring-webflux GHSA-mq64-j8f9-9gcj This resolves Dependabot alerts #117 and #118 for spring-webmvc and spring-webflux respectively. Both vulnerabilities (GHSA-mq64-j8f9-9gcj) are in Spring Framework 7.0.7 and earlier. Spring Boot 4.0.7 is the earliest 4.0.x patch release that manages Spring Framework 7.0.8+. Co-Authored-By: Catarina Correia --- gradle/libs.versions.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml index 4b414e0..f2e7f8a 100644 --- a/gradle/libs.versions.toml +++ b/gradle/libs.versions.toml @@ -1,6 +1,6 @@ [versions] java = "21" -spring-boot = "4.0.6" +spring-boot = "4.0.7" spring-dependency-management = "1.1.7" openapi-generator = "7.21.0" openapi-tools = "0.2.9"